kz/lifx-php

Maintainerscaution

Only one registry account has publishing access. The repository is user-owned rather than organization-backed, so there is little visible redundancy if that maintainer stops supporting the package.

Project backingcaution

The package and repository are owned by the same individual account, which supports identity continuity but provides no organization-level backing or visible support redundancy.

Release historycaution

The package has had only two releases, with the latest published over eight years ago and no releases in the last 12 months. This is strong evidence of limited ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the last repository push being over seven years ago. This materially raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap, not a severe risk by itself.